Adaptive Cyber-Attack Detection in IIoT Using Attention-Based LSTM-CNN Models

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Gueriani, Afrah, Kheddar, Hamza, Mazari, Ahmed Cherif
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866908279184031744
author Gueriani, Afrah
Kheddar, Hamza
Mazari, Ahmed Cherif
author_facet Gueriani, Afrah
Kheddar, Hamza
Mazari, Ahmed Cherif
contents The rapid expansion of the industrial Internet of things (IIoT) has introduced new challenges in securing critical infrastructures against sophisticated cyberthreats. This study presents the development and evaluation of an advanced Intrusion detection (IDS) based on a hybrid LSTM-convolution neural network (CNN)-Attention architecture, specifically designed to detect and classify cyberattacks in IIoT environments. The research focuses on two key classification tasks: binary and multi-class classification. The proposed models was rigorously tested using the Edge-IIoTset dataset. To mitigate the class imbalance in the dataset, the synthetic minority over-sampling technique (SMOTE) was employed to generate synthetic samples for the underrepresented classes. This ensured that the model could learn effectively from all classes, thereby improving the overall classification performance. Through systematic experimentation, various deep learning (DL) models were compared, ultimately demonstrating that the LSTM-CNN-Attention model consistently outperformed others across key performance metrics. In binary classification, the model achieved near-perfect accuracy, while in multi-class classification, it maintained a high accuracy level (99.04%), effectively categorizing different attack types with a loss value of 0.0220%.
format Preprint
id arxiv_https___arxiv_org_abs_2501_13962
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Adaptive Cyber-Attack Detection in IIoT Using Attention-Based LSTM-CNN Models
Gueriani, Afrah
Kheddar, Hamza
Mazari, Ahmed Cherif
Cryptography and Security
Artificial Intelligence
Machine Learning
Systems and Control
The rapid expansion of the industrial Internet of things (IIoT) has introduced new challenges in securing critical infrastructures against sophisticated cyberthreats. This study presents the development and evaluation of an advanced Intrusion detection (IDS) based on a hybrid LSTM-convolution neural network (CNN)-Attention architecture, specifically designed to detect and classify cyberattacks in IIoT environments. The research focuses on two key classification tasks: binary and multi-class classification. The proposed models was rigorously tested using the Edge-IIoTset dataset. To mitigate the class imbalance in the dataset, the synthetic minority over-sampling technique (SMOTE) was employed to generate synthetic samples for the underrepresented classes. This ensured that the model could learn effectively from all classes, thereby improving the overall classification performance. Through systematic experimentation, various deep learning (DL) models were compared, ultimately demonstrating that the LSTM-CNN-Attention model consistently outperformed others across key performance metrics. In binary classification, the model achieved near-perfect accuracy, while in multi-class classification, it maintained a high accuracy level (99.04%), effectively categorizing different attack types with a loss value of 0.0220%.
title Adaptive Cyber-Attack Detection in IIoT Using Attention-Based LSTM-CNN Models
topic Cryptography and Security
Artificial Intelligence
Machine Learning
Systems and Control
url https://arxiv.org/abs/2501.13962